kanpeki
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill follows security best practices by recommending input validation via the Zod library and providing structured patterns for form handling.
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of standard, well-known development dependencies such as
react-aria-components,next-themes, andreact-hook-formfrom the official npm registry. - [COMMAND_EXECUTION]: Provides instructions for using the
shadcnCLI tool to add components to a project. This is a common and legitimate developer workflow for modern React applications. - [EXTERNAL_DOWNLOADS]: The skill references the Kanpeki component registry (
@kanpeki/*) and documentation site (kanpeki.vercel.app), which are the primary resources for the library and handled as vendor-owned assets.
Audit Metadata